sandboxedjs 0.1.38 → 0.1.40

package/README.md

@@ -37,6 +37,50 @@ npm install sandboxedjs
 
 Node 18.17+. Everything is pure JavaScript and WebAssembly — no compilation step.
 
+## Deep Agents
+
+`SandboxedJsBackend` lets [LangChain Deep Agents](https://github.com/langchain-ai/deepagents)
+use a `sandboxedjs` container as its execution and filesystem sandbox. Install the two packages
+in the host application (plus the LangChain model adapter for your provider):
+
+```bash
+npm install sandboxedjs deepagents
+```
+
+Create a container, pass its backend to `createDeepAgent`, and dispose the container when the run
+is finished:
+
+```ts
+import { createContainer } from "sandboxedjs";
+import { SandboxedJsBackend, installSandboxSkills } from "sandboxedjs/agent";
+import { createDeepAgent } from "deepagents";
+
+const box = await createContainer({
+  cwd: "/app",
+  network: { allowOutbound: true }, // required for npm installs or other downloads
+});
+
+await installSandboxSkills(box); // optional: installs the bundled sandbox workflow skills
+
+// `model` is any chat model supported by Deep Agents, configured by your application.
+const agent = createDeepAgent({
+  model,
+  backend: new SandboxedJsBackend(box, { cwd: "/app" }),
+});
+
+const result = await agent.invoke({
+  messages: [{ role: "user", content: "Create and test a small Node.js service in /app." }],
+});
+
+box.dispose();
+```
+
+The adapter mirrors `deepagents@1.13.2`'s `SandboxBackendProtocolV2` and provides shell execution plus
+`ls`, `read`, `readRaw`, `write`, `edit`, `grep`, `glob`, `delete`, file upload, and file download
+operations. Paths passed to filesystem tools must be absolute. `deepagents` is intentionally not a
+runtime dependency of `sandboxedjs`; applications that use this integration install and configure
+it alongside their model provider.
+
 ## What's inside
 
 | | |

package/dist/agent.d.cts

@@ -1,4 +1,4 @@
-import { C as Container } from './container-BsPKqY9R.cjs';
+import { C as Container } from './container-Bg_BuaAv.cjs';
 
 /**
  * Structural copies of the LangChain Deep Agents backend contract.

package/dist/agent.d.ts

@@ -1,4 +1,4 @@
-import { C as Container } from './container-BsPKqY9R.js';
+import { C as Container } from './container-Bg_BuaAv.js';
 
 /**
  * Structural copies of the LangChain Deep Agents backend contract.

package/dist/{container-BsPKqY9R.d.cts → container-Bg_BuaAv.d.cts}

@@ -30,6 +30,13 @@ interface ChildSpawnConfig {
      * types and one that reads to end-of-input and stops.
      */
     inheritStdio?: boolean;
+    /**
+     * The child was told to ignore its input (`stdio: "ignore"`).
+     *
+     * It then has no input at all, so its stdin is closed at once rather than
+     * left open on a parent that will never write to it.
+     */
+    stdinIgnored?: boolean;
 }
 type SpawnChild = (config: ChildSpawnConfig) => ChildHandle;
 /**

package/dist/{container-BsPKqY9R.d.ts → container-Bg_BuaAv.d.ts}

@@ -30,6 +30,13 @@ interface ChildSpawnConfig {
      * types and one that reads to end-of-input and stops.
      */
     inheritStdio?: boolean;
+    /**
+     * The child was told to ignore its input (`stdio: "ignore"`).
+     *
+     * It then has no input at all, so its stdin is closed at once rather than
+     * left open on a parent that will never write to it.
+     */
+    stdinIgnored?: boolean;
 }
 type SpawnChild = (config: ChildSpawnConfig) => ChildHandle;
 /**

package/dist/index.cjs

@@ -17313,7 +17313,8 @@ ${stdinPath === null ? "" : `(function () {
 }
 async function execute(ctx, invocation) {
   const { pod } = ctx.kernel;
-  const interactive = ctx.stdin.interactive || ctx.stdin.isTTY;
+  const live = ctx.stdin.interactive || ctx.stdin.isTTY;
+  const tty = ctx.stdin.isTTY;
   let exitCode = 0;
   try {
     const proc = await pod.spawn("node", [invocation.script], {
@@ -17325,7 +17326,8 @@ async function execute(ctx, invocation) {
        * program's stdin has to stay open and be fed as it arrives — and be
        * reported as a terminal, since that is what decides whether a CLI
        * prompts or takes its defaults. */
-      ...interactive ? { interactiveStdin: true, tty: true } : {}
+      ...live ? { interactiveStdin: true } : {},
+      ...tty ? { tty: true } : {}
     });
     proc.on("output", (chunk) => {
       try {
@@ -17343,7 +17345,7 @@ async function execute(ctx, invocation) {
       ctx.stdin.rawMode = enabled;
     });
     let forwarding = false;
-    if (interactive) {
+    if (live) {
       forwarding = true;
       void (async () => {
         while (forwarding) {
@@ -21635,10 +21637,9 @@ var KernelChildProcess = class {
   started = false;
   cancelled = false;
   constructor(kernel, cred, config, pid) {
-    if (config.inheritStdio) {
-      this.stdin.isTTY = true;
-      this.stdin.interactive = true;
-    }
+    this.stdin.interactive = true;
+    if (config.inheritStdio) this.stdin.isTTY = true;
+    if (config.stdinIgnored) this.stdin.end();
     this.stdin.onRawMode = (enabled) => this.emit("rawmode", enabled);
     this.kernel = kernel;
     this.cred = cred;
@@ -22293,6 +22294,9 @@ var CommonJsEngine = class {
     return target.exports;
   }
   resolve(specifier, importer, kind = "require") {
+    if (specifier.startsWith("file://")) {
+      specifier = pathFromFileUrl(specifier);
+    }
     const builtin = this.builtin(specifier);
     if (builtin.found) return specifier.replace(/^node:/, "");
     if (specifier.startsWith("#")) {
@@ -22657,6 +22661,11 @@ function ownKeys(target) {
   }
   return keys;
 }
+function pathFromFileUrl(url) {
+  const withoutScheme = url.slice("file://".length).replace(/^localhost/, "");
+  const path = withoutScheme.split(/[?#]/, 1)[0];
+  return decodeURIComponent(path) || "/";
+}
 function fileUrl(path) {
   return `file://${path.split("/").map(encodeURIComponent).join("/")}`;
 }
@@ -24226,13 +24235,19 @@ function createChildProcessModule(spawnChild, defaultCwd, syncSpawn, defaultEnv
     const shell = typeof options.shell === "string" ? options.shell : "/bin/sh";
     return { file: shell, args: ["-c", command] };
   };
+  const stdinIgnored = (options) => {
+    const stdio = options.stdio;
+    if (stdio === "ignore") return true;
+    return Array.isArray(stdio) && stdio[0] === "ignore";
+  };
   const start2 = (file3, args, options) => {
     const resolved = options.shell ? throughShell([file3, ...args].join(" "), options) : { file: file3, args };
     const handle = spawnChild({
       command: resolved.file,
       args: resolved.args,
       cwd: options.cwd ?? defaultCwd(),
-      env: environmentFor(options)
+      env: environmentFor(options),
+      ...stdinIgnored(options) ? { stdinIgnored: true } : {}
     });
     return new ChildProcess(handle, resolved.file, resolved.args);
   };
@@ -27993,6 +28008,7 @@ var Container = class _Container {
     const stdout = new Pipe();
     const stderr = new Pipe();
     if (opts.tty) {
+      stdin.isTTY = true;
       stdout.isTTY = true;
       stderr.isTTY = true;
       stdout.columns = opts.columns ?? 80;
@@ -28717,6 +28733,20 @@ function serveContainerOn(port, box) {
   };
   port.start?.();
 }
+var LOOPBACK_HOST = /^(?:localhost|127(?:\.\d{1,3}){3}|0\.0\.0\.0|\[?::1\]?)$/i;
+function containerTarget(value) {
+  let url;
+  try {
+    url = new URL(value.trim());
+  } catch {
+    return null;
+  }
+  if (url.protocol !== "http:" && url.protocol !== "https:") return null;
+  if (!LOOPBACK_HOST.test(url.hostname)) return null;
+  const port = Number(url.port || (url.protocol === "https:" ? 443 : 80));
+  if (!Number.isInteger(port) || port < 1 || port > 65535) return null;
+  return { port, path: `${url.pathname}${url.search}` };
+}
 async function createPreview(box, options = {}) {
   if (typeof navigator === "undefined" || !("serviceWorker" in navigator)) return null;
   const scriptUrl = options.scriptUrl ?? new URL("./service-worker.js?no-inline", (typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('index.cjs', document.baseURI).href)));
@@ -28752,8 +28782,16 @@ async function createPreview(box, options = {}) {
   serveContainerOn(channel.port1, box);
   worker.postMessage({ type: "sandboxedjs:connect" }, [channel.port2]);
   const base2 = registration.scope.replace(/\/$/, "");
+  const urlFor = (port) => `${base2}/__sbx__/${port}/`;
   return {
-    urlFor: (port) => `${base2}/__sbx__/${port}/`,
+    urlFor,
+    resolve: (value) => {
+      const target = containerTarget(value);
+      if (!target) return null;
+      if (!box.net.listening().some((entry) => entry.port === target.port)) return null;
+      const path = target.path.startsWith("/") ? target.path : `/${target.path}`;
+      return `${urlFor(target.port).replace(/\/$/, "")}${path}`;
+    },
     dispose: async () => {
       channel.port1.close();
       await registration.unregister();
@@ -28828,6 +28866,7 @@ exports.builtinNames = builtinNames;
 exports.captureStdio = captureStdio;
 exports.configureCPython = configureCPython;
 exports.configurePython = configurePython;
+exports.containerTarget = containerTarget;
 exports.createChildProcessModule = createChildProcessModule;
 exports.createContainer = createContainer;
 exports.createContext = createContext;